The DMZ

9:22 AM

That's daft

My thoughts exactly.

Anonymous

...

Anonymous

And JayMee accused me of being too "nazi" with my moderating/helpfulness.

Anonymous

HAH!

Anonymous

The question has 43 upvotes too.

Anonymous

9:24 AM

So where on Earth did he get such an idea?

Link?

Anonymous

To what?

Q: Is this type of behaviour acceptable?

Being called a nazi lol

Anonymous

Oh, I cannot remember if he used those exact words but two seconds.

Anonymous

15

A question appeared on the site this afternoon which is explicitly off-topic for the site as per the scope. All that question would do is cause opinionated answers and comments filled to the brim with discussion (Which I know we want to avoid as best we can) However, a user decided that he had...

discussion

Anonymous

9:25 AM

Enjoy.

Isn't this from... half a year ago?

Anonymous

(You can find the discussions attached in the post, although I was under the impression you were already involved/saw them at one point)

Oh I get what you mean now. Thought this was recent. :P

Anonymous

Yes Tom, but Forest asked me for a link.

Anonymous

Oh aha.

Anonymous

9:26 AM

JayMee has not called me a nazi for a good while now.

Anonymous

No.

yay me for memory

Anonymous

I cannot remember his exact words but it was more or less that I was over-moderating or whatever.

Anonymous

Either way, that comment I'm glad Rory removed it.

Anonymous

I have no idea where that guy got such an idea.

Anonymous

9:27 AM

If the question has 43 upvotes with high rep members commenting & answering chances are it's a good question :p

Well and it's just a silly claim.

isn't this the uhm... not so smart guy from crypto?

Anonymous

No that's Paul.

Anonymous

IIRC.

Right

I think this guy is just a bit confused.

Anonymous

9:28 AM

Oh my God!

Anonymous

This is the coolest thing I have ever seen.

Anonymous

Anonymous

Hahah!

lmao

Anonymous

Oh by the way Forest, I did not get the job :(

Anonymous

9:30 AM

Have you heard of MWR Security anyone?

Anonymous

That's the company.

hm, no

Anonymous

Yeah, I didn't get it anyway :(

Looks like it's a subsidiary of F-Secure.

@J.J Christmas spanning tree

9:32 AM

Er, was purchased by them, that is.

Anonymous

They hired someone else and I was a bit late with my application.

but if F-Secure is their mother ship, it seems good

@J.J yes, I know them reasonably well. The guy who set it up used to sit on a couple of committees with me

I dunno, I've never liked F-Secure.

Anonymous

@RoryAlsop Damn, nice :D

Anonymous

9:33 AM

I'm really sad, it looked like a cool as f*ck place to work TBH.

Anonymous

Oh well...

But for more political reasons than anything else.

Bad luck @J.J - they certainly were one of the cool ones. Unsure what they are like these days

I was gonna say

I think professionally - as far as I know and from what is public - they look good

Anonymous

Oh yes the recruiter mentioned F-Secure when I spoke to him.

Anonymous

9:34 AM

But I have that phone interview with Claranet on Thursday afternoon so fingers crossed I guess.

Anonymous

The role is not as good as the one at MWR though but what can you do I guess :p

can you share some questions?

or maybe some that really stuck out to you

from your last one

Anonymous

Oh it was an informal Tom.

Anonymous

Just like "in detail what do you do in your current role"

Anonymous

"what do you think is the most positive & negative aspects of your current role"

Anonymous

9:35 AM

"what do you think you will bring to mwr security"

Anonymous

Things like that :d

ah, so no real questions about your knowledge?

So they were just sizing you up.

Not actually checking to see if you know enough.

Anonymous

Yeah pretty much.

Anonymous

I mean, they asked what I enjoy to do, they asked about HackTheBox, etc but no technical questions.

9:37 AM

ah damn.. I'd really like to know some of these

because the ones I had in my interview were .. pretty easy

Anonymous

Speaking of HackTheBox, I did my first ROP BoF yesterday @forest

Nice!

Anonymous

Only took me 4 hours with some help in the last hour, hah.

With a ROP compiler or manually?

Anonymous

I spent the first hour just writing shit in nano and deleting it.

Anonymous

9:38 AM

Uh.

Anonymous

I wrote a Python script to exploit a really bad piece of code.

Anonymous

That let me pass "/bin/sh" into it for a root shell for privesc.

I mean for building the ROP chain. I guess manually then. :P

I had like one mid-level question, but the rest I could snap answer immediately without even thinking about it

Anonymous

Oh!

Anonymous

9:38 AM

Yes, it was manual Forest.

Anonymous

I stole most of the code from a LiveOverflow video :D

lol

I'd love to say "ROP is dead cuz CFI", but practically no one uses it. :D

Anonymous

But, it was cool.

(No I don't consider CFG to be real CFI)

Anonymous

I felt like some kind of ninja.

9:39 AM

Yeah ROP is a really neat technique.

Anonymous

Even though the code was very, very basic.

Anonymous

I don't have it but it was a little something like this.

Anonymous

Actually, I forgot it off the top of my head.

heh

Anonymous

But it's literally just using padding with 52 characters, the command binsh, finding the bin/sh address, the system address sending the padding then when hitting the correct location in EIP sending bin/sh

Anonymous

9:41 AM

And that's it.

ROP can be used to do far more powerful things.

99% of the time, it's Turing Complete.

Anonymous

TBH.

Anonymous

IF I did not have someone helping me I would've been fucked.

Anonymous

I had almost no clue what I was doing at first.

Anonymous

And GDB was not on the machine so I had to use ldd which I'd never used and I barely ever used gdb before.

Anonymous

9:42 AM

And this is about as far as my asm knowledge goes.

Well it's always a start. Perhaps you should write a basic pair of client-server programs in ASM to pass something simple like raw TCP. It's a good learning experience.

security.stackexchange.com/a/200036/86741

love this guy

Yeah that one was confusing.

Anonymous

@forest I will at some point.

Anonymous

But I have so much to do right now it's all escaping me.

Anonymous

9:46 AM

Things are getting a little bit on top of me right now, I'm getting stressed and less & less sleep per night.

Anonymous

sigh

ah

that guy's thoughts:
"hmm, what an interesting question on this Q&A site.
bollocks! I don't know the answer..
but I have a great idea, I will just give the person who asked the question a link to my favorite search engine: google. that'll do!"

:D

Anonymous

@TomK. lmao.

Anonymous

9:47 AM

@forest Yeah, I just need to sort out this new job thingy and I think I will be fine.

"guess I have to make an account first..."

Anonymous

I don't like to be in the unknown about the future, and there is a lot of that for me right now so I need to find out what I will be doing for work ASAP.

Anonymous

Gotta' love paranoia!

@J.J You ever read lcamtuf.coredump.cx/prep?

It's a very good guide and helps prepare you for potential issues like financial ones.

Anonymous

No, it's long though so I won't read now :D

9:49 AM

E.g. gives advice on saving money and living safely even in the face of potential emergencies that might result in loss of a job or worse.

Anonymous

I just worry too much.

Anonymous

But, eh, that's just me.

Anonymous

I've always been a "worrier" I guess.